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Response to Arguments 

1 . Applicant's arguments, see "REMARKS", filed September 25, 2008, with respect 
to claims 50 and 51 have been fully considered and are persuasive. The 35 U.S.C. 101 
of claims 50 and 51 has been withdrawn. 

2. Applicant's arguments filed September 25, 2008, with regards to "REMARKS" 
page 26, have been fully considered but they are not persuasive. 

3. Applicants basically argue that the Office Action has not properly established that 
Henry et al. has a priority if date with respect to the subject matter relied upon in the 
rejection. 

4. Examiner respectfully submits that the provisional application of Henry et al. 
(60/290,776) which was filed May 14, 2001 , teaches subject matter that suggests AP 
should have the public key of the mobile host's home AAA server, in the business 
partner database (Henry et al.; col. 4 lines 5-15), and the authentication credential is 
validated, the access point grants the network access device conditional access to the 
network, contacts the remote authentication server to verify a status of the 
authentication credential for the network access device (Henry et al.; fig. 2, col. 2 lines 
18-20). Provisional Application 60/290,776 suggests a security certificate with a public 
key and private key that is held by the AAA server and access point (pages 2-4). 
Therefore, Examiner maintains that the Henry et al. reference has priority that precedes 
the present application foreign priority date. 
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5. Applicant's arguments with respect to claims 1 -21 , 27 and 29-51 , with regards to 
the newly amended claims, have been considered but are moot in view of the new 
ground(s) of rejection. 



Claim Rejections - 35 USC §112 

6. The following is a quotation of the first paragraph of 35 U.S. C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

7. Claims 50 and 51 are rejected under 35 U.S.C. 112, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject matter 
which was not described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application was filed, 
had possession of the claimed invention. Claims 50 and 51 recite a "computer program 
embodied on a computer-readable medium," however such a program and/or software 
embodied on a computer readable medium is not taught, suggested or disclosed in 
Applicant's specification. 



Claim Rejections - 35 USC § 103 

8. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 



Application/Control Number: 10/500,370 Page 4 

Art Unit: 2617 

9. Claims 1, 3, 4, 6, 7-14, 16, 17, 20, 21, 27, 29-34, 36-38, 40, 42, 43, 46, 47, 50 

and 51 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chavez et al. 

(U.S. Patent # 6,591,102 B1) in view of Lamb (US 6,085,083), and in further view of 

Bilgic et al. (6,097,817). 

Consider claim 1, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, (col. 1 line 67- col. 2 lines 2), comprising: receiving an outgoing service 
request from a mobile handset, reading on the claimed "user," and a base station 
reading a memory for storing authentication information for mobile handsets 
services by the base station, reading on the claimed "node." The base station 
determines whether the authentication information is stored in the memory. If it 
is, the base station reads the authentication information and performs normal 
authentication. If it isn't, the base station transmits a request for authentication 
information to the mobile switching system, wherein the mobile switching system 
forwards the request to a service provider wireless server. The service provider 
wireless server maintains records as to which services the mobile handset 
receives, reading on the claimed "using a specific record associated with a user, 
the specific record is stored at a node," (col. 1 lines 45-48, col. 5 lines 35-50). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 
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In the same field of endeavor, Lamb clearly shows and discloses that each 
MSC communicating to an HLR has a corresponding MPCM file record in the 
MPCM file of the HLR. SUBS file 222 is the "subscribers' files" which store 
subscribers' profiles on a per subscriber basis (i.e., information for each cellular 
phone). The FRAUD-INFO segment of a subscriber's profile record indicates 
whether or not fraud protection (i.e., FP check) is authorized for this subscriber. 
HLR-based fraud protection feature has been implemented by automatically 
locking cellular phones when they are inactive. This prevents unauthorized use 
of a subscriber's phone and/or fraudulent access to the network by cloned 
phones. When a subscriber initially registers with the network, the HLR requires 
the subscriber to enter a feature code and personal identification number (PIN) 
before access is granted. The subscriber can then lock the phone again by 
entering the same feature code and PIN. If an unlocked phone becomes inactive 
for a predetermined period of time, the HLR automatically invokes the fraud 
protection feature until the subscriber unlocks the phone with feature code and 
PIN entries, reading on the claimed "specific record contains information that 
determines that a user characteristic is to be verified with a home network prior to 
providing access to said service," (col. 2 line 61- col. 3 line 6, col. 4 lines 29-45, 
col. 5 lines 46-50). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authorize fraud protection as taught by 
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Lamb in the method of Chavez et al., in order to include fraud protection in the 
HLR (Lamb; abstract). 

However, Chavez et al., as modified by Lamb, fail to specifically disclose 
that the user is verified every Mth session. 

In the same field of endeavor, Bilgic et al. clearly show and disclose 
authentication is performed with each user registration, as well as part of normal 
call setup on a 1-in-N basis-i.e., once every N calls authentication is performed, 
with N being configurable within the system, reading on the claimed 
"authorization and authentication for the user is verified every Mth session, 
wherein M is an integer representing the current session," (col. 30 line 14- col. 31 
line 30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user every N calls as 
taught by Bilgic et al. in the method of Chavez et al., as modified by Lamb, in 
order to include fraud protection in the HLR (Lamb; abstract). 

Consider claims 3 and 4, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 1 above, and in addition, Chavez et al. further discloses that 
the base station determines whether the authentication information is stored in 
the memory, and if it is, the base station reads the authentication information and 
performs normal authentication, reading on the claimed "deciding based on said 
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information that the authentication and/or authorization needs be verified; 
performing the authentication and/or authorization," (col. 5 lines 25-60). 

Consider claim 6, the combination of Chavez et al. and Lamb, as modified 
by Bilgic et al., clearly shows and discloses the claimed invention as applied to 
claim 4 above, and in addition, Chavez et al. further discloses that the base 
station determines whether the authentication information is stored in the 
memory, and if it is, the base station reads the authentication information and 
performs normal authentication, reading on the claimed "performing the 
authentication and/or authorization in the node if the required parameters are 
available," (col. 5 lines 25-60). 

Consider claim 7, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, (col. 1 line 67- col. 2 lines 2), comprising: receiving an outgoing service 
request from a mobile handset, reading on the claimed "user," and a base station 
reading a memory for storing authentication information for mobile handsets 
services by the base station, reading on the claimed "node." The base station 
determines whether the authentication information is stored in the memory. If it 
is, the base station reads the authentication information and performs normal 
authentication. If it isn't, the base station transmits a request for authentication 
information to the mobile switching system, wherein the mobile switching system 
forwards the request to a service provider wireless server. The service provider 
wireless server maintains records as to which services the mobile handset 
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receives, reading on the claimed "using a user specific record, determines that a 
user characteristic is to be verified to providing access to said service; and 
providing access to said service responsive to said user specific record," (col. 1 
lines 45-48, col. 5 lines 35-50). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 

In the same field of endeavor, Lamb clearly shows and discloses that each 
MSC communicating to an HLR has a corresponding MPCM file record in the 
MPCM file of the HLR. SUBS file 222 is the "subscribers' files" which store 
subscribers' profiles on a per subscriber basis (i.e., information for each cellular 
phone). The FRAUD-INFO segment of a subscriber's profile record indicates 
whether or not fraud protection (i.e., FP check) is authorized for this subscriber. 
HLR-based fraud protection feature has been implemented by automatically 
locking cellular phones when they are inactive. This prevents unauthorized use 
of a subscriber's phone and/or fraudulent access to the network by cloned 
phones. When a subscriber initially registers with the network, the HLR requires 
the subscriber to enter a feature code and personal identification number (PIN) 
before access is granted. The subscriber can then lock the phone again by 
entering the same feature code and PIN. If an unlocked phone becomes inactive 
for a predetermined period of time, the HLR automatically invokes the fraud 
protection feature until the subscriber unlocks the phone with feature code and 
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PIN entries, reading on the claimed "using a user specific record associated with 
a user, wherein the user record is stored in a server node, that indicates a 
condition that, when satisfied, determines that a user characteristic is to be 
verified with a home network prior to providing access, " (col. 2 line 61- col. 3 line 
6, col. 4 lines 29-45, col. 5 lines 46-50). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authorize fraud protection as taught by 
Lamb in the method of Chavez et al., in order to include fraud protection in the 
HLR (Lamb; abstract). 

However, Chavez et al., as modified by Lamb, fail to specifically disclose 
that the user is verified every Mth session. 

In the same field of endeavor, Bilgic et al. clearly show and disclose 
authentication is performed with each user registration, as well as part of normal 
call setup on a 1-in-N basis-i.e., once every N calls authentication is performed, 
with N being configurable within the system, reading on the claimed "wherein the 
condition is that authorization and authentication for the user is verified every Mth 
session, wherein M is an integer representing the current session," (col. 30 line 
14- col. 31 line 30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user every N calls as 
taught by Bilgic et al. in the method of Chavez et al., as modified by Lamb, in 
order to include fraud protection in the HLR (Lamb; abstract). 
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Consider claim 8, the combination of Chavez et al. and Lamb, as modified 
by Bilgic et al., clearly shows and discloses the claimed invention as applied to 
claim 7 above, and in addition, Chavez et al. further disclose that the base 
station determines if the received request is for an incoming or outgoing service 
request. If it is for an incoming service request, the base station reads 
authentication information from the incoming request. The authentication 
information may then be stored in a memory in base station and normal 
authentication is performed, reading on the claimed "determining if said condition 
is satisfied; and providing access to said service without verifying said user 
characteristic if said condition is not satisfied," (col. 5 lines 10-32). 

Consider claim 9, Chavez et al., as modified by Lamb, clearly shows and 
discloses the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose that the base station determines if the received 
request is for an incoming or outgoing service request. If it is for an outgoing 
service request, the base station determines whether the authentication 
information is stored in the memory. If it is, the base station reads the 
authentication information and performs normal authentication. If it isn't, the 
base station transmits a request for authentication information to the mobile 
switching system, wherein the mobile switching system forwards the request to a 
service provider wireless server. The service provider wireless server maintains 
records as to which services the mobile handset receives, reading on the claimed 
"determining whether said condition is satisfied; verifying said user characteristic 
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if said condition is satisfied; and subsequent to said step of verifying the user 
characteristic providing access to said service when said user characteristic 
indicates the user is permitted access to said service," (col. 1 lines 45-48, col. 5 
lines 35-50). 

Consider claim 10, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 7 above, and in addition, Chavez et al. further disclose that if 
the request is an incoming service request, which could be an outgoing service 
request including a telephone number requesting a call, the base station reads 
the authentication information from the incoming service request, the information 
may or may not stored in memory for future use, if it is normal authentication is 
performed, if it isn't the base station transmits a request for authentication 
information, reading on the claimed "determining whether said condition is 
satisfied when a call session between said user and said service provider node is 
initiated," (col. 5 lines 10-60). 

Consider claim 1 1 , the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 7 above, and in addition, Chavez et al. further disclose that if 
the request is an incoming service request, wherein this request could be an 
incoming service request from the MSC to provide a communication service to 
mobile handset, the base station reads the authentication information from the 
incoming service request, the information may or may not stored in memory for 
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future use, if it is normal authentication is performed, reading on the claimed 
"determining from the user specific record associated with said user if said 
condition exists during a call session between said user equipment and said 
service provider node," (col. 5 lines 25-60). 

Consider claim 12, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 7 above, and in addition, Chavez et al. further disclose 
receiving an outgoing service request from a mobile handset, and a base station 
reading a memory for storing authentication information for mobile handsets 
services by the base station. The base station determines whether the 
authentication information is stored in the memory. If it is, the base station reads 
the authentication information and performs normal authentication, reading on 
the claimed "indicating, via said user specific record, when access to said service 
is permitted without determining, from data stored at a server node in said home 
network, whether access is permitted," (col. 5 lines 35-50). 

Consider claim 13, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 7 above, and in addition, Chavez et al. further disclose 
receiving an outgoing service request from a mobile handset, and a base station 
reading a memory for storing authentication information for mobile handsets 
services by the base station. The base station determines whether the 
authentication information is stored in the memory. If it is, the base station reads 
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the authentication information and performs normal authentication, reading on 
the claimed "storing said user specific record at a node of said serving network," 
(col. 5 lines 35-50). 

Consider claim 14, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 7 above, and in addition, Chavez et al. further disclose that if a 
the service information is not stored in memory from a previous request for the 
service information, a request is sent to the service provider which has a 
database that stores all the services a mobile is allowed to receive, (col. 6 lines 
20-35, col. 1 lines 35-60); the service provider then transmits the service 
information back to the MSC the MSC stores the information in memory, (col. 6 
lines 20-65); service information is transmitted to the MSC which the information 
to the base station and then authentication takes place, (col. 6 lines 20-65, col. 5 
lines 25-60); and if the authentication is successful service is provided to the 
user, reading on the claimed "generating a register message at said user 
equipment and transmitting said register message to a local server node of said 
communication system; determining whether a condition indicated by said user 
specific record stored at said local server node is satisfied; generating an access 
message at said local server node indicating that access to said service is 
permitted; and transmitting said access message to said service provider node," 
(col. 6 lines 25-60). 
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Consider claim 16, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 7 above, and in addition, Chavez et al. further disclose that if a 
the service information is not stored in memory from a previous request for the 
service information, a request is sent to the service provider which has a 
database that stores all the services a mobile is allowed to receive, (col. 6 lines 
20-35, col. 1 lines 35-60); the service provider then transmits the service 
information back to the MSC the MSC stores the information in memory, (col. 6 
lines 20-65); service information is transmitted to the MSC which transmits the 
information to the base station and then authentication takes place, (col. 6 lines 
20-65, col. 5 lines 25-60); and if the authentication is successful service is 
provided to the user, reading on the claimed "generating an invite message at 
said user equipment and transmitting said invite message to a local server node 
of said communication system; determining whether a condition indicated by said 
user specific record stored at said local server node is satisfied; generating an 
access message at said local server node indicating that access to said service 
is permitted; and transmitting said access message to said service provider 
node," (col. 5 lines 25-60). 

Consider claims 17 and 18, the combination of Chavez et al. and Lamb, 
as modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 7 above, and in addition, Chavez et al. further disclose that if a 
the service information is not stored in memory from a previous request for the 
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service information, a request is sent to the service provider which has a 
database that stores all the services a mobile is allowed to receive, reading on 
the claimed "user characteristic comprises whether said user is authorized to 
access said service; user characteristic comprises whether said user is 
authenticated to access said service," (col. 6 lines 20-35, col. 1 lines 35-60). 

Consider claim 20, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 1 above, and in addition, Chavez et al. further discloses that if 
the request is an incoming service request, base station reads the authentication 
information from the incoming service request, the information may or may not 
stored in memory for future use, if it is normal authentication is performed, 
reading on the claimed "using a specific record comprises storing a user specific 
record," (col. 5 lines 25-60). 

Consider claim 21, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, reading on the claimed "an apparatus," (col. 1 line 67- col. 2 lines 2), 
comprising: receiving an outgoing service request from a mobile handset, and a 
base station reading a memory for storing authentication information for mobile 
handsets services by the base station, reading on the claimed "receiving means 
for receiving a message from a user terminal." The base station determines 
whether the authentication information is stored in the memory. If it is, the base 
station reads the authentication information and performs normal authentication. 
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If it isn't, the base station transmits a request for authentication information to the 
mobile switching system, wherein the mobile switching system forwards the 
request to a service provider wireless server. The service provider wireless 
server maintains records as to which services the mobile handset receives. If the 
authentication is successful service is provided to the user, reading on the 
claimed "storing means for using a user specific record, associated with said 
user, determines that a user characteristic is to be verified prior to providing a 
user with access to said a service; and generating means for generating, in 
response to said user specific record, an access message for providing said user 
with access to said service, from a service provider node," (col. 1 lines 45-48, col. 
5 lines 25-60). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 

In the same field of endeavor, Lamb clearly shows and discloses that each 
MSC communicating to an HLR has a corresponding MPCM file record in the 
MPCM file of the HLR. SUBS file 222 is the "subscribers' files" which store 
subscribers' profiles on a per subscriber basis (i.e., information for each cellular 
phone). The FRAUD-INFO segment of a subscriber's profile record indicates 
whether or not fraud protection (i.e., FP check) is authorized for this subscriber. 
HLR-based fraud protection feature has been implemented by automatically 
locking cellular phones when they are inactive. This prevents unauthorized use 
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of a subscriber's phone and/or fraudulent access to the network by cloned 
phones. When a subscriber initially registers with the network, the HLR requires 
the subscriber to enter a feature code and personal identification number (PIN) 
before access is granted. The subscriber can then lock the phone again by 
entering the same feature code and PIN. If an unlocked phone becomes inactive 
for a predetermined period of time, the HLR automatically invokes the fraud 
protection feature until the subscriber unlocks the phone with feature code and 
PIN entries. The HLR sends a regnot response back to VLR, which contains 
relevant parts of the subscriber's profile record from the SUBS file of HLR. The 
VLR stores the subscriber's profile in its database and sends the regnot response 
to serving MSC with the relevant parts of the subscriber's profile, reading on the 
claimed "storing a user specific record, indicating a condition that, when satisfied, 
determines that a user characteristic is to be verified with a home network," (col. 
2 line 61- col. 3 line 6, col. 4 lines 29-45, col. 5 lines 46-50, col. 7 lines 40-45). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authorize fraud protection as taught by 
Lamb in the method of Chavez et al., in order to include fraud protection in the 
HLR (Lamb; abstract). 

However, Chavez et al., as modified by Lamb, fail to specifically disclose 
that the user is verified every Mth session. 

In the same field of endeavor, Bilgic et al. clearly show and disclose 
authentication is performed with each user registration, as well as part of normal 
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call setup on a 1-in-N basis-i.e., once every N calls authentication is performed, 
with N being configurable within the system, reading on the claimed "wherein the 
condition is that authorization and authentication for the user is verified every Mth 
session, wherein M is an integer representing the current session," (col. 30 line 
14- col. 31 line 30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user every N calls as 
taught by Bilgic et al. in the method of Chavez et al., as modified by Lamb, in 
order to include fraud protection in the HLR (Lamb; abstract). 

Consider claim 27, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, comprising: receiving an outgoing service request from a mobile 
handset, reading on the claimed "apparatus," and a base station reading a 
memory for storing authentication information for mobile handsets services by 
the base station. The base station determines whether the authentication 
information is stored in the memory. If it is, the base station reads the 
authentication information and performs normal authentication. If it isn't, the 
base station transmits a request for authentication information to the mobile 
switching system, wherein the mobile switching system forwards the request to a 
service provider wireless server. The service provider wireless server maintains 
records as to which services the mobile handset receives. If the authentication is 
successful service is provided to the user, reading on the claimed "record using 
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means for using a specific record associated with a user, determines that a user 
characteristic is to be verified prior to providing access to said service, from a 
service provider node," (col. 1 lines 45-48, col. 1 line 67- col. 2 lines 2, col. 5 lines 
35-60). 

However, Chavez et al. fail to specifically disclose that the mobile handset 
uses a specific record that contains information to determine that a user is to be 
verified with a home network. 

In the same field of endeavor, Lamb clearly shows and discloses that each 
MSC communicating to an HLR has a corresponding MPCM file record in the 
MPCM file of the HLR. SUBS file 222 is the "subscribers' files" which store 
subscribers' profiles on a per subscriber basis (i.e., information for each cellular 
phone). The FRAUD-INFO segment of a subscriber's profile record indicates 
whether or not fraud protection (i.e., FP check) is authorized for this subscriber. 
HLR-based fraud protection feature has been implemented by automatically 
locking cellular phones when they are inactive. This prevents unauthorized use 
of a subscriber's phone and/or fraudulent access to the network by cloned 
phones. When a subscriber initially registers with the network, the HLR requires 
the subscriber to enter a feature code and personal identification number (PIN) 
before access is granted. The subscriber can then lock the phone again by 
entering the same feature code and PIN. If an unlocked phone becomes inactive 
for a predetermined period of time, the HLR automatically invokes the fraud 
protection feature until the subscriber unlocks the phone with feature code and 
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PIN entries, reading on the claimed " using a user specific record, indicating a 
condition that, when satisfied, determines that a user characteristic is to be 
verified with a home network, "(col. 2 line 61- col. 3 line 6, col. 4 lines 29-45, col. 
5 lines 46-50). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authorize fraud protection as taught by 
Lamb in the method of Chavez et al., in order to include fraud protection in the 
HLR (Lamb; abstract). 

However, Chavez et al., as modified by Lamb, fail to specifically disclose 
that the user is verified every Mth session. 

In the same field of endeavor, Bilgic et al. clearly show and disclose 
authentication is performed with each user registration, as well as part of normal 
call setup on a 1-in-N basis-i.e., once every N calls authentication is performed, 
with N being configurable within the system, reading on the claimed "wherein the 
condition is that authorization and authentication for the user is verified every Mth 
session, wherein M is an integer representing the current session," (col. 30 line 
14- col. 31 line 30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user every N calls as 
taught by Bilgic et al. in the method of Chavez et al., as modified by Lamb, in 
order to include fraud protection in the HLR (Lamb; abstract). 
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Consider claim 29, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, (col. 1 line 67- col. 2 lines 2), comprising: receiving an outgoing service 
request from a mobile handset, reading on the claimed "user," and a base station 
reading a memory for storing authentication information for mobile handsets 
services by the base station, reading on the claimed "serving node." The base 
station determines whether the authentication information is stored in the 
memory. If it is, the base station reads the authentication information and 
performs normal authentication. If it isn't, the base station transmits a request for 
authentication information to the mobile switching system, wherein the mobile 
switching system forwards the request to a service provider wireless server. The 
service provider wireless server maintains records as to which services the 
mobile handset receives, reading on the claimed "storing an authorization and 
authentication profile, associated with said user, at a serving node; using said 
authorization and authentication profile at said serving node in the 
communication system; wherein said authorization and authentication profile, 
determines that a user characteristic is to be verified prior to providing access to 
said service," (col. 1 lines 45-48, col. 5 lines 35-50). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 
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In the same field of endeavor, Lamb clearly shows and discloses that each 
MSC communicating to an HLR has a corresponding MPCM file record in the 
MPCM file of the HLR. SUBS file 222 is the "subscribers' files" which store 
subscribers' profiles on a per subscriber basis (i.e., information for each cellular 
phone). The FRAUD-INFO segment of a subscriber's profile record indicates 
whether or not fraud protection (i.e., FP check) is authorized for this subscriber. 
HLR-based fraud protection feature has been implemented by automatically 
locking cellular phones when they are inactive. This prevents unauthorized use 
of a subscriber's phone and/or fraudulent access to the network by cloned 
phones. When a subscriber initially registers with the network, the HLR requires 
the subscriber to enter a feature code and personal identification number (PIN) 
before access is granted. The subscriber can then lock the phone again by 
entering the same feature code and PIN. If an unlocked phone becomes inactive 
for a predetermined period of time, the HLR automatically invokes the fraud 
protection feature until the subscriber unlocks the phone with feature code and 
PIN entries, reading on the claimed "profile contains information indicating a 
condition that, when satisfied, determines that a user characteristic is to be 
verified with a home network," (col. 2 line 61- col. 3 line 6, col. 4 lines 29-45, col. 
5 lines 46-50). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authorize fraud protection as taught by 
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Lamb in the method of Chavez et al., in order to include fraud protection in the 
HLR (Lamb; abstract). 

However, Chavez et al., as modified by Lamb, fail to specifically disclose 
that the user is verified every Mth session. 

In the same field of endeavor, Bilgic et al. clearly show and disclose 
authentication is performed with each user registration, as well as part of normal 
call setup on a 1-in-N basis-i.e., once every N calls authentication is performed, 
with N being configurable within the system, reading on the claimed "wherein the 
condition is that authorization and authentication for the user is verified every Mth 
session, wherein M is an integer representing the current session," (col. 30 line 
14- col. 31 line 30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user every N calls as 
taught by Bilgic et al. in the method of Chavez et al., as modified by Lamb, in 
order to include fraud protection in the HLR (Lamb; abstract). 

Consider claims 30, 31, 42, 46, 50 and 51, Chavez et al. clearly show 
and disclose a method for transmitting feature and authentication information for 
wireless communication services, reading on the claimed "apparatus; method; 
computer readable medium (computer program)," (col. 1 line 67- col. 2 lines 2), 
comprising: receiving an outgoing service request from a mobile handset, and a 
base station reading a memory for storing authentication information for mobile 
handsets services by the base station, reading on the claimed "processor; 



Application/Control Number: 10/500,370 Page 24 

Art Unit: 2617 

controller; interface for configured to receive a message from said user terminal." 
The base station determines whether the authentication information is stored in 
the memory. If it is, the base station reads the authentication information and 
performs normal authentication. If it isn't, the base station transmits a request for 
authentication information to the mobile switching system, wherein the mobile 
switching system forwards the request to a service provider wireless server. The 
service provider wireless server maintains records as to which services the 
mobile handset receives. If the authentication is successful, service is provided 
to the user, reading on the claimed "processor configured to use a user specific 
record, associated with said user, determines that a user characteristic is to be 
verified prior to providing said user with access to said a service; and generate, 
in response to said user specific record, an access message for providing said 
user with access to said service from a service provider node.," (col. 1 lines 45- 
48, col. 5 lines 25-60). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 

In the same field of endeavor, Lamb clearly shows and discloses that each 
MSC communicating to an HLR has a corresponding MPCM file record in the 
MPCM file of the HLR. SUBS file 222 is the "subscribers' files" which store 
subscribers' profiles on a per subscriber basis (i.e., information for each cellular 
phone). The FRAUD-INFO segment of a subscriber's profile record indicates 
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whether or not fraud protection (i.e., FP check) is authorized for this subscriber. 
HLR-based fraud protection feature has been implemented by automatically 
locking cellular phones when they are inactive. This prevents unauthorized use 
of a subscriber's phone and/or fraudulent access to the network by cloned 
phones. When a subscriber initially registers with the network, the HLR requires 
the subscriber to enter a feature code and personal identification number (PIN) 
before access is granted. The subscriber can then lock the phone again by 
entering the same feature code and PIN. If an unlocked phone becomes inactive 
for a predetermined period of time, the HLR automatically invokes the fraud 
protection feature until the subscriber unlocks the phone with feature code and 
PIN entries, reading on the claimed "user specific record associated with said 
user to indicate contains a condition that, when satisfied, determines that a user 
characteristic is to be verified with a home network, " (col. 2 line 61- col. 3 line 6, 
col. 4 lines 29-45, col. 5 lines 46-50). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authorize fraud protection as taught by 
Lamb in the method of Chavez et al., in order to include fraud protection in the 
HLR (Lamb; abstract). 

However, Chavez et al., as modified by Lamb, fail to specifically disclose 
that the user is verified every Mth session. 

In the same field of endeavor, Bilgic et al. clearly show and disclose 
authentication is performed with each user registration, as well as part of normal 
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call setup on a 1-in-N basis-i.e., once every N calls authentication is performed, 
with N being configurable within the system, reading on the claimed "wherein the 
condition is that authorization and authentication for the user is verified every Mth 
session, wherein M is an integer representing the current session," (col. 30 line 
14- col. 31 line 30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user every N calls as 
taught by Bilgic et al. in the method of Chavez et al., as modified by Lamb, in 
order to include fraud protection in the HLR (Lamb; abstract). 

Consider claims 32, 38, 43 and 47, the combination of Chavez et al. and 
Lamb, as modified by Bilgic et al., clearly shows and discloses the claimed 
invention as applied to claims 30, 31, 42 and 46 above, respectively, and in 
addition, Chavez et al. further discloses that if the service information is not 
sorted in the memory the MSC requests the information from the service 
provider, reading on the claimed "a transmitter configured to transmit said access 
message to a service provider," (col. 6 lines 20-50). 

Consider claim 34 and 40, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claims 30 and 31 above, respectively, and in addition, Chavez et al. 
further discloses that if the service information is not sorted in the memory the 
MSC requests the information from the service provider, reading on the claimed 
"serving or proxy-call session control function node," (col. 6 lines 20-50). 
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Consider claim 36, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 30 above, and in addition, Chavez et al. further discloses that if 
the request is an incoming service request, base station reads the authentication 
information from the incoming service request, the information may or may not 
stored in memory for future use, if it is normal authentication is performed, 
reading on the claimed "a storage unit configured to store a user specific record," 
(col. 5 lines 25-60). 

Consider claim 37, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly shows and discloses the claimed invention as 
applied to claim 31 above, and in addition, Chavez et al. further discloses that if 
the request is an incoming service request, base station reads the authentication 
information from the incoming service request, the information may or may not 
stored in memory for future use, if it is normal authentication is performed, 
reading on the claimed "a storage unit configured to store a user specific record," 
(col. 5 lines 25-60). 

1 0. Claims 2, 5, 33, 39, 44 and 48 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over the combination of Chavez et al. (U.S. Patent # 6,591,102 B1) and 
Lamb (US 6,085,083), in view of Bilgic et al. (6,097,817), and in further view of Henry 
etal.(US 6,856,800 B1). 
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Consider claims 2, 33, 39, 44 and 48, and as applied to claims 1, 30, 
31, 42 and 46 above, respectively, the combination of Chavez et al. and Lamb, 
as modified by Bilgic et al., clearly show and disclose the claimed invention 
except transferring information for the home AAA. 

In the same field of endeavor, Henry et al. clearly show and disclose that 
the AP should have the public key of the mobile host's home AAA server, in the 
business partner database. This is set up between the access network and the 
mobile host's home network via a business agreement, reading on the claimed 
"transferring said information from the AAA-H to the serving node in the signaling 
path for the service setup and/or service event and/or registration; a receiver 
configured to receive data comprising said user specific record transmitted from 
a home AAA server node," (col. 4 lines 5-15). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to validate a users credentials locally at an 
access point with information previously received from the home AAA server as 
taught by Henry et al. in the method of Chavez et al. and Lamb, as modified by 
Bilgic et al., in order to provide fast authentication of a mobile host (Henry et al.). 

Consider claim 5, and as applied to claim 4 above, the combination of 
Chavez et al. and Lamb, as modified by Bilgic et al., clearly show and disclose 
the claimed invention except performing authentication/authorization at the home 
AAA. 
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In the same field of endeavor, Henry et al. clearly show and disclose that if 
the authentication credential is validated, the access point grants the network 
access device conditional access to the network, contacts the remote 
authentication server to verify a status of the authentication credential for the 
network access device; and suspends network access for the network access 
device in response to a message received from the remote authentication server 
that the authentication credential for the network access device has been 
revoked, reading on the claimed "performing the authentication and/or 
authorization by using the AAA-H," (fig. 2, col. 2 lines 18-20). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to validate a users credentials locally at an 
access point and at a home AAA server as taught by Henry et al. in the method 
of Chavez et al. and Lamb, as modified by Bilgic et al., in order to provide fast 
authentication of a mobile host (Henry et al.). 

1 1 . Claim 19 is rejected under 35 U.S.C. 103(a) as being unpatentable over the 
combination of Chavez et al. (U.S. Patent # 6,591,102 B1) and Lamb (US 6,085,083), 
in view of Bilgic et al. (6,097,817), and in further view of Wright (U.S. Patent # 
6,957,061 B1). 

Consider claim 19, and as applied to claim 7 above, the combination of 
Chavez et al. and Lamb, as modified by Bilgic et al., clearly show and disclose 
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the claimed invention except determining the frequency of performing 
authentication/authorization . 

In the same field of endeavor, Wright clearly shows and discloses that the 
user equipment can allow the authentication vector to be used for a 
predetermined time period, number of calls or total call duration. Before 
requesting service, the user equipment determined whether the authentication 
vector should still be valid and issues with the KSI given by the serving network 
or a special KSI, which forces the serving network to request a new 
authentication vector when the next service request is made, reading on the 
claimed "condition determines the frequency at which said user is to be 
authorized and/or authenticated during a call session between said user 
equipment and said service provider node," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated depending on a predetermined set time as taught by 
Wright in the method of Chavez et al. and Lamb, as modified by Bilgic et al., in 
order to provide maximum security for the home operator (Wright; col. 4 lines 3- 
4). 

12. Claims 15, 35, 41, 45 and 49 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over the combination of Chavez et al. (U.S. Patent # 6,591,102 B1) and 
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Lamb (US 6,085,083), in view of Bilgic et al. (6,097,817), and in further view of 

Basilier et al. (U.S. Patent # 6,728,536). 

Consider claim 15, and as applied to claim 14 above, the combination of 
Chavez et al. and Lamb, as modified by Bilgic et al., clearly show and disclose 
the claimed invention, except that the information is specifically requested prior to 
storing the specific record and is transferred from the AAA-H in response. 

In the same field of endeavor, Basilier et al. clearly show and disclose a 
method in which specific information, which may be access specific and/or 
application specific information is transmitted between visiting and home 
networks, (col. 1 line s66- col. 2 line 2). A user wished to use the mobile terminal 
in the visited network, and registers in the visited network. The ACS/VLR 
assembles a registration and/or authentication message, and sends it to the 
AAA-F. The AAA-F uses a NAI to locate the appropriate AAA-H, and route the 
message to the appropriate HLR. The HLR validates or denies the registration 
request, and generates an appropriate response message, which is transmitted 
to the visited network, reading on the claimed "prior to said storing said user 
specific record, generating a request message at said local server node and 
transmitting said request message to the home AAA server of the user; and 
transferring data comprising said user specific record from said home AAA server 
to said local server node responsive to said request message," (fig. 2 b., col. 4 
line 52- col. 5 line 25, col. 6 lines 15-30). 
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Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user by communicating 
with the home network (HLR, AAA-H) as taught by Basilier et al. in the method of 
Chavez et al. and Lamb, as modified by Bilgic et al., in order to include fraud 
protection in the HLR (Lamb; abstract). 

Consider claims 35, 41, 45 and 49, and as applied to claims 30, 31, 42 
and 46 above, respectively, the combination of Chavez et al. and Lamb, as 
modified by Bilgic et al., clearly show and disclose the claimed invention, except 
that the information included in the specific record specifically includes a first field 
for identifying the user and a second field to identify when to authenticate at the 
AAA-H. 

In the same field of endeavor, Basilier et al. clearly show and disclose a 
method in which specific information, which may be access specific and/or 
application specific information is transmitted between visiting and home 
networks, (col. 1 line s66- col. 2 line 2). A user wished to use the mobile terminal 
in the visited network, and registers in the visited network. The ACSA/LR 
assembles a registration and/or authentication message, and sends it to the 
AAA-F. The AAA-F uses a NAI, or the significant digits of the IMSI, to locate the 
appropriate AAA-H, and route the message to the appropriate HLR. The HLR 
validates or denies the registration request, and generates an appropriate 
response message, which is transmitted to the visited network, reading on the 
claimed "user specific record comprises a first data field identifying said user and 
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a second data field determining when authentication and/or authorization of said 
user is required in order to access said service," (fig. 2 b., col. 4 line 52- col. 5 line 
25, col. 6 lines 15-30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user by communicating 
with the home network (HLR, AAA-H) as taught by Basilier et al. in the method of 
Chavez et al. and Lamb, as modified by Bilgic et al., in order to include fraud 
protection in the HLR (Lamb; abstract). 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JAIME M. HOLLIDAY whose telephone number is 
(571)272-8618. The examiner can normally be reached on Monday through Friday 
7:30am to 4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Charles Appiah can be reached on (571) 272-7904. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Jaime M Holliday/ 
Examiner, Art Unit 2617 

/Alexander Eisen/ 
Supervisory Patent Examiner, Art Unit 2617 
5-Jan-09 



